CVE-2019-2103

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAGSECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Authentication flaw

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAGSECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2103

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAGSECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-2103

CVE-2019-2103 affects Android 9 Framework. It describes a permissions bypass that could allow the Google Assistant to screenshot FLAG_SECURE apps, leading to local information disclosure without user interaction. The Android Security Bulletin lists CVE-2019-2103 under Framework with Type ID and H...

CVE-2019-2103

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAGSECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2019-16195

Name of the Vulnerable Software and Affected Versions Google Assistant in Android version 9 Description The issue concerns a permissions bypass in Google Assistant on Android 9, allowing it to capture screenshots of apps that have the FLAG SECURE flag set. This could result in the disclosure of...

CVE-2019-2103: Exposure of Sensitive Information to an Unauthorized Actor

In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAGSECURE. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress media-library-assistant plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. media-library-assistant is a multimedia library management plugin used in it. A cross-site scripting vulnerability exists in the...

CVE-2018-20982

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens...

CVE-2018-20982

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens...

CVE-2018-20982

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens...

CVE-2018-20982

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens...

CVE-2018-20982

The CVE concerns the WordPress plugin Media Library Assistant, affected in versions prior to 2.74. The issue is a cross-site scripting (XSS) vulnerability via the Media/Assistant or Settings/Media Library Assistant admin submenu screens, due to the underlying handling in those interfaces. Impact ...

CVE-2018-20982: Improper Neutralization of Input During Web Page Generation

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens...

Google Nest Security Cam Bugs Allow Device Takeover

Multiple vulnerabilities in Google’s Nest Cam IQ connected indoor security camera would allow an attacker on the same network to take over the device, execute code on it and/or take it offline. Nest Labs’ Cam IQ Indoor integrates security-enhanced Linux in Android, Google Assistant and facial...

CVE-2019-11145

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11146

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11146

Intel Driver & Support Assistant (before 19.7.30.2) is affected by CVE-2019-11146 due to improper file verification, which may allow an authenticated user to escalate privileges via local access. The issue is reported across multiple sources, including Intel’s advisory (Intel-SA-00276) and Red Ha...